summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Revert "Replaced gethostbyname() with gethostbynamel() to get a list of all ↵Renato Botelho2014-02-181-12/+10
| | | | | | | | IPs associated with the dns name and add them to the allowed list" This change is not needed, filterdns will handle it. This reverts commit d460371416d4e2cfef976d5a7616f63f6faa203f.
* Do not do any operations on system libraries. Nowdays pbis are used and ↵Ermal2014-02-181-25/+2
| | | | those do not break things by definition
* Merge pull request #891 from PiBa-NL/captive_disableRenato Botelho2014-02-181-0/+2
|\ | | | | captive portal, don't generate rules for a disabled portal
| * captive portal, don't generate rules for disabled portalPiBa-NL2014-01-251-0/+2
| |
* | Merge pull request #890 from N0YB/Gateway_MonitorRenato Botelho2014-02-182-8/+212
|\ \ | | | | | | Gateway Monitor Advanced Settings
| * | Gateway Monitor Advanced SettingsN0YB2014-01-251-3/+24
| | | | | | | | | | | | | | | Recommended changes made to calculated value input behavior. Restrict interval to integer of 1 or greater.
| * | Gateway Monitor Advanced SettingsN0YB2014-01-242-7/+190
| | | | | | | | | | | | | | | | | | | | | | | | | | | Exposes 3 additional apinger configuration options in the gateway monitor advanced section which can either be set manually, calculated based on interval, or use the hard coded defaults. 1) Avg Delay Samples 2) Avg Loss Samples 3) Avg Loss Delay Samples The current hard coded defaults are okay for a short interval such as the 1 second default. But do not work well when a longer interval is required.
* | | Merge pull request #904 from dv-user1/masterRenato Botelho2014-02-181-10/+12
|\ \ \ | | | | | | | | Replaced gethostbyname() with gethostbynamel() to get a list of all IPs ...
| * | | Replaced gethostbyname() with gethostbynamel() to get a list of all IPs ↵Francois Blanchette2014-02-071-10/+12
| | | | | | | | | | | | | | | | associated with the dns name and add them to the allowed list
* | | | Revert "Pass the family to the get_real_interface function to retrieve the ↵Ermal2014-02-181-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | correct real interface. Might help Ticket #3357" This reverts commit cb431dbf47c53b72119bd8feca0217e1c25d998b.
* | | | Really need the interface where v6 is running toa dd the gateway/route ↵Ermal2014-02-181-2/+2
| | | | | | | | | | | | | | | | rather than the one used for the configuration. This Fixes #3357
* | | | Do not call rc.newwanip when pppoe gets a v6 ip.Ermal2014-02-181-1/+2
| | | |
* | | | Pass the family to the get_real_interface function to retrieve the correct ↵Ermal2014-02-181-1/+1
| | | | | | | | | | | | | | | | real interface. Might help Ticket #3357
* | | | Put a timeout of 30 seconds to aid with Ticket #3412Ermal2014-02-171-3/+3
| | | |
* | | | Move this global declaration to the proper file rather than backend codeErmal2014-02-172-12/+13
| | | |
* | | | Help ticket #3449:Renato Botelho2014-02-171-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Improve data validation to avoid save a host/subnet or a IPv4 with invalid mask. The reported error is on javascript and only happen on IE8,but this fix will prevent the same issue happening in the future on a different browser.
* | | | Use correct parameter (bootfile-url) to configure netboot on DHCPdv6, it ↵Renato Botelho2014-02-172-28/+12
| | | | | | | | | | | | | | | | fixes #3421
* | | | Fix typo on variable name and really add custom options for dhcpdv6Renato Botelho2014-02-171-1/+1
| | | |
* | | | Normally when an ip is set the interface comes up on BSD stacks. Though push ↵Ermal2014-02-171-0/+4
| | | | | | | | | | | | | | | | this commit which Fixes #3281
* | | | Whitespace fixErmal2014-02-171-38/+38
| | | |
* | | | Use htmlspecialchars(), a better solution for #2952Renato Botelho2014-02-171-1/+1
| | | |
* | | | Grab exec result just to be carefulRenato Botelho2014-02-171-2/+2
| | | |
* | | | Put a kludge for now which Fixes #3280. It should be improved later on to ↵Ermal2014-02-171-6/+13
| | | | | | | | | | | | | | | | have proper handling and overloading of configuration functions
* | | | Consider setting of noconcurrent login for passthrough expiry of users. ↵Ermal2014-02-171-19/+22
| | | | | | | | | | | | | | | | Fixes #3340
* | | | Some tweaking to handle when switching off dhcpv6.Ermal2014-02-171-5/+8
| | | |
* | | | Merge 10 -> 10.1 and 10.1 -> 10.2 function upgrade since the recent changes ↵Ermal2014-02-171-5/+2
| | | | | | | | | | | | | | | | done on 2.1.1 for Ticket #3441
* | | | Use descr as the field name for voucher description so it gets CDATA ↵Ermal2014-02-171-3/+3
| | | | | | | | | | | | | | | | protection. Fixes #3441
* | | | Use the 11th column for the radius context rather than overriding the ↵Ermal2014-02-171-17/+18
| | | | | | | | | | | | | | | | interim interval field with it. Fixes #3447
* | | | Merge pull request #917 from phil-davis/masterErmal Luçi2014-02-171-12/+58
|\ \ \ \ | | | | | | | | | | Enhanced validation of general DNS servers and gateways
| * | | | Improve processing of DNS server changesPhil Davis2014-02-151-8/+35
| | | | | | | | | | | | | | | | | | | | What a pain this was. The user can blank out a DNS server from a position in the middle of the list. e.g. they had all 4 entries previously filled, and then they blank out DNS server #3. The way the DNS servers are stored in the config, they are just the defined ones in an "un-indexed" array. So actually entries 1, 2 and 4 on the screen become 1st, 2nd and 3rd in the config. The selected gateways for 1, 2 and 4 then have to end up in positions 1, 2 and 3 to match the stored DNS servers. This fixes all that up, as well as allowing the user to leave a gateway selected against a blanked-out DNS server entry - in that case the whole entry is "removed/ignored".
| * | | | Enhanced validation of general DNS servers and gatewaysPhil Davis2014-02-141-8/+27
| | | | |
* | | | | Add a knob to let the user select which console (video or serial) is ↵jim-p2014-02-142-1/+27
| | | | | | | | | | | | | | | | | | | | preferred in cases where there are multiple consoles present. Also provide a way to force this preference.
* | | | | Add a mechanism by which the serial port can be forced on always regardless ↵jim-p2014-02-143-6/+6
| | | | | | | | | | | | | | | | | | | | of the config setting. (useful for nano+vga setups)
* | | | | Fix #2952, escape necessary chars to avoid xss injectionRenato Botelho2014-02-141-1/+1
| | | | |
* | | | | Respect g['tmp_path']Renato Botelho2014-02-141-3/+3
| | | | |
* | | | | Add https to update URLs and replace RELENG_8_3 by RELENG_10_0Renato Botelho2014-02-141-2/+2
| | | | |
* | | | | Abort installation when pbi_add failsRenato Botelho2014-02-131-13/+22
|/ / / /
* | | | Merge pull request #913 from Aeyoun/string-max-connections-per-host-per-secondErmal Luçi2014-02-132-5/+5
|\ \ \ \ | | | | | | | | | | Change string to "Maximum new connections per host / per second(s)"
| * | | | Change string to "Maximum new connections per host / per second(s)"Daniel Aleksandersen2014-02-132-5/+5
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | Clarifying the setting's meaning. As suggested by forum member "Senser" on https://forum.pfsense.org/index.php/topic,65472.msg356024.html#msg356024
* | | | Obsolete old ipsec tools filesRenato Botelho2014-02-121-0/+5
| | | |
* | | | Be specific on the authentication method to use since xauth-eap will be ↵Ermal2014-02-121-3/+3
| | | | | | | | | | | | | | | | active as well
* | | | Correct script pathErmal2014-02-121-1/+1
| | | |
* | | | Remove references to racoon and correct some handling of ipsec configurationErmal2014-02-121-13/+10
| | | |
* | | | Remove copy paste leftoverErmal2014-02-121-1/+1
| | | |
* | | | If specified add authentication script configuration to strongswan.confErmal2014-02-121-0/+16
| | | |
* | | | Remove not used anymore parametersErmal2014-02-121-9/+0
| | | |
* | | | Teach script to read authentication servers from environmentErmal2014-02-121-0/+1
| | | |
* | | | Fix symlink calls adding full link name, it fixes issue reported at ↵Renato Botelho2014-02-111-2/+2
| | | | | | | | | | | | | | | | https://forum.pfsense.org/index.php/topic,72405.0.html
* | | | Properly set the configuration here based on ↵Ermal2014-02-111-2/+2
| | | | | | | | | | | | | | | | https://forum.pfsense.org/index.php/topic,68531.0.html
* | | | Catch a validation issue reported on the mailing list thread: IPv6 address ↵Ermal2014-02-111-2/+2
| | | | | | | | | | | | | | | | data validation from: Brian Candler. It prevents putting a subnet in the address field since it then breaks the whole filter generation process
OpenPOWER on IntegriCloud